Sandbox an MCP server for Claude Code with one line in .mcp.json
A community MCP server runs with your full user permissions. If you add one to Claude Code and it turns out to be sloppy or malicious, it can read your SSH keys or write anywhere your account can. You can limit that without a container. anthropic-experimental/sandbox-runtime ships a small CLI calle…
Lead source: DEV Community — AI